$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e6a17064-43ef-3884-9f43-86b2251d1184.roa File: e6a17064-43ef-3884-9f43-86b2251d1184.roa (raw, json) Hash identifier: ZvTk5Wd7M6LxCFiQCtgL4Qz62m9PmsGiRbM5IWwxjl8= Subject key identifier: 01:0A:18:0C:8E:F0:C0:7D:6A:F8:87:23:07:B0:68:BB:DD:0E:A6:34 Certificate issuer: /CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Certificate serial: 010D0C9F43285848F4F6A5070BBBB20F7B2D0D00 Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e6a17064-43ef-3884-9f43-86b2251d1184.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 3360 IP address blocks: 20.139.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:a5:07:0b:bb:b2:0f:7b:2d:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=586b387a-8614-4e95-8038-1c763d75f17c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f4:aa:d0:3a:20:64:83:80:39:76:44:2c:7f: 4a:c0:9a:58:08:8c:f6:9d:ce:1a:aa:42:2d:cb:14: 94:50:b7:9d:dc:dd:ea:50:cb:dc:03:13:06:c2:9a: 1f:a0:7f:5e:64:cd:a5:51:dc:7a:cd:26:f9:e1:08: 0a:f0:2e:06:0a:43:30:a5:96:df:0f:a8:a9:a3:fd: b8:b6:a0:45:58:62:65:10:49:39:5b:09:a8:31:13: 5b:a4:6c:ce:77:fb:e9:5a:d9:69:a3:8a:e1:eb:d9: be:d7:f6:72:9b:ef:56:c3:7d:83:b5:b6:d4:3e:47: bb:a1:c9:44:d1:f0:c4:5e:76:cc:91:9d:dd:ea:80: 42:5d:a1:36:0f:fc:b5:b8:3f:f6:9c:ae:74:b4:8a: 52:b8:68:46:26:7b:21:7c:95:e6:44:6a:9f:ce:3f: fb:ca:98:6e:29:d8:cb:0f:8c:27:43:a6:27:e6:3e: 83:e1:2d:89:f6:ed:d2:28:6b:6f:ca:3e:b1:08:19: d6:ae:2e:e7:c3:c2:12:78:c9:d7:a9:53:fd:7a:bd: 0b:2f:b7:e1:b1:aa:ac:e5:b5:e4:8a:1c:75:5d:74: 6c:fd:79:91:d3:75:e6:e6:76:2b:66:f8:27:44:6d: 7d:c4:72:22:1f:c2:3f:44:8b:c2:fc:6d:e9:0d:37: c6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:0A:18:0C:8E:F0:C0:7D:6A:F8:87:23:07:B0:68:BB:DD:0E:A6:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/e6a17064-43ef-3884-9f43-86b2251d1184.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl X509v3 Authority Key Identifier: keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer sbgp-ipAddrBlock: critical IPv4: 20.139.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:67:5f:99:c9:41:b6:d7:55:e2:c4:0a:98:80:6c:3e:90:57: cc:7f:fc:c3:94:5b:34:c9:43:44:58:9f:6c:cd:81:60:be:af: 71:6c:dd:8c:e5:27:39:00:37:af:4e:a6:bf:4e:65:1d:3e:fe: 60:a9:ac:28:29:39:a7:f9:56:e6:65:69:17:e4:21:29:7d:fe: e6:bf:4b:e8:45:f3:03:01:ed:64:01:8d:7a:ff:18:ef:21:d7: 11:74:6e:1c:88:55:f4:60:d4:31:b0:7b:c2:d8:99:9f:b8:26: cd:60:72:bd:d8:37:88:1e:ac:8b:f3:fe:ee:3c:c4:bc:48:60: 58:5e:f7:d3:70:dd:fa:50:0b:23:95:b6:f5:48:16:ec:ce:e3: cf:b4:17:42:e4:60:5e:87:26:c4:30:d3:c2:ee:e7:0b:ac:d2: 3a:36:e4:dc:e4:24:29:1d:81:ed:03:11:16:8a:0d:1b:ed:3e: b3:cc:73:5b:13:4a:9e:8b:99:5d:ce:8e:5d:a6:d5:82:85:20: 06:5d:dd:9a:f1:c5:7a:a8:7a:a6:3a:6b:a1:ed:eb:b0:21:e0: 19:8b:66:ba:ad:1f:31:46:45:a3:b2:08:ee:03:44:83:0c:be: 8a:8c:be:86:44:53:4c:6b:57:82:8f:e7:21:7a:fe:06:b6:8e: e6:7a:99:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09qUHC7uyD3stDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjc0YzJlMTYtNmE1Yy00YWUyLTk2MWQtZjlkMjkxMTI2 NzI4MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NTg2YjM4N2EtODYxNC00ZTk1LTgwMzgtMWM3NjNkNzVmMTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfSq0DogZIOAOXZELH9KwJpYCIz2nc4aqkIt yxSUULed3N3qUMvcAxMGwpofoH9eZM2lUdx6zSb54QgK8C4GCkMwpZbfD6ipo/24 tqBFWGJlEEk5WwmoMRNbpGzOd/vpWtlpo4rh69m+1/Zym+9Ww32DtbbUPke7oclE 0fDEXnbMkZ3d6oBCXaE2D/y1uD/2nK50tIpSuGhGJnshfJXmRGqfzj/7yphuKdjL D4wnQ6Yn5j6D4S2J9u3SKGtvyj6xCBnWri7nw8ISeMnXqVP9er0LL7fhsaqs5bXk ihx1XXRs/XmR03Xm5nYrZvgnRG19xHIiH8I/RIvC/G3pDTfGnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEKGAyO8MB9aviHIwewaLvdDqY0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzRj MmUxNi02YTVjLTRhZTItOTYxZC1mOWQyOTExMjY3MjgvZTZhMTcwNjQtNDNlZi0z ODg0LTlmNDMtODZiMjI1MWQxMTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjc0YzJlMTYtNmE1Yy00YWUyLTk2 MWQtZjlkMjkxMTI2NzI4LzY3NGMyZTE2LTZhNWMtNGFlMi05NjFkLWY5ZDI5MTEy NjcyOC5jcmwwHwYDVR0jBBgwFoAU5c1w19zFvXw/8JH9X/8IRSOO6qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NzRjMmUxNi02YTVjLTRhZTItOTYxZC1mOWQy OTExMjY3MjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEFItgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ9nX5nJQbbXVeLECpiAbD6QV8x//MOUWzTJQ0RYn2zNgWC+r3Fs3Yzl JzkAN69Opr9OZR0+/mCprCgpOaf5VuZlaRfkISl9/ua/S+hF8wMB7WQBjXr/GO8h 1xF0bhyIVfRg1DGwe8LYmZ+4Js1gcr3YN4gerIvz/u48xLxIYFhe99Nw3fpQCyOV tvVIFuzO48+0F0LkYF6HJsQw08Lu5wus0jo25NzkJCkdge0DERaKDRvtPrPMc1sT Sp6LmV3Ojl2m1YKFIAZd3ZrxxXqoeqY6a6Ht67Ah4BmLZrqtHzFGRaOyCO4DRIMM voqMvoZEU0xrV4KP5yF6/ga2juZ6mUA= -----END CERTIFICATE-----Generated at Fri Mar 14 11:02:42 2025 by rpki-client